WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

Description

Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

Vendor	Product	Versions
aresit	wp compress	n/a

Tier C

VulDB5d ago

→ No new info (linked only)

CVSS 3.110.0 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

7.20.01

CWECWE-94

PublishedAug 18, 2026

Trending Score51

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

0 upvotes0 downvotes